🇺🇸
TPI-Abuse
2026-11-06 17:02:26
UTC ·
(18 hours ago)
(mod_security) mod_security (id:210350) triggered by 31.134.7.66 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Fri Nov 06 12:02:20.917594 2026] [security2:error] [pid 31673:tid 31673] [client 31.134.7.66:63537] ModSe ...
show more
(mod_security) mod_security (id:210350) triggered by 31.134.7.66 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Fri Nov 06 12:02:20.917594 2026] [security2:error] [pid 31673:tid 31673] [client 31.134.7.66:63537] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||twincitytn.com|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "twincitytn.com"] [uri "/understanding-how-the-lord-saves-people/"] [unique_id "au4IHI1pKdZHIQPuYkw_NAAAAA0"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-11-05 11:27:15
UTC ·
(1 day ago)
(mod_security) mod_security (id:210350) triggered by 31.134.7.66 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Thu Nov 05 06:27:11.137460 2026] [security2:error] [pid 23556:tid 23556] [client 31.134.7.66:22165] ModSe ...
show more
(mod_security) mod_security (id:210350) triggered by 31.134.7.66 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Thu Nov 05 06:27:11.137460 2026] [security2:error] [pid 23556:tid 23556] [client 31.134.7.66:22165] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||painting-with-numbers.com|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "painting-with-numbers.com"] [uri "/is-great-for/"] [unique_id "auxoD9FI0GHBj6oH_hEA0wAAAAM"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-10-31 09:36:29
UTC ·
(1 week ago)
(mod_security) mod_security (id:210350) triggered by 31.134.7.66 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sat Oct 31 05:36:26.503213 2026] [security2:error] [pid 18803:tid 18803] [client 31.134.7.66:24921] ModSe ...
show more
(mod_security) mod_security (id:210350) triggered by 31.134.7.66 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sat Oct 31 05:36:26.503213 2026] [security2:error] [pid 18803:tid 18803] [client 31.134.7.66:24921] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||www.stpny.com|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "www.stpny.com"] [uri "/about.shtml"] [unique_id "auW2mjgzlqTfuY4POwjZkwAAAA4"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-10-30 16:02:35
UTC ·
(1 week ago)
(mod_security) mod_security (id:210350) triggered by 31.134.7.66 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Fri Oct 30 12:02:30.705067 2026] [security2:error] [pid 6525:tid 6525] [client 31.134.7.66:42945] ModSecu ...
show more
(mod_security) mod_security (id:210350) triggered by 31.134.7.66 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Fri Oct 30 12:02:30.705067 2026] [security2:error] [pid 6525:tid 6525] [client 31.134.7.66:42945] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||www.alexgitlin.com|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "www.alexgitlin.com"] [uri "/npp/mogth.htm"] [unique_id "auS_lu4VJZieKpmQhCbZWgAAAAc"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇨🇭
backslash
2026-10-29 16:12:02
UTC ·
(1 week ago)
block ruleset CC531825F9395F9A07FB06C1247C46770A2690F8
Bad Web Bot
🇺🇸
TPI-Abuse
2026-10-28 18:51:17
UTC ·
(1 week ago)
(mod_security) mod_security (id:210350) triggered by 31.134.7.66 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed Oct 28 14:51:12.418157 2026] [security2:error] [pid 16241:tid 16241] [client 31.134.7.66:33435] ModSe ...
show more
(mod_security) mod_security (id:210350) triggered by 31.134.7.66 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Wed Oct 28 14:51:12.418157 2026] [security2:error] [pid 16241:tid 16241] [client 31.134.7.66:33435] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||painting-with-numbers.com|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "painting-with-numbers.com"] [uri "/blog/tag/Nothing in Particular"] [unique_id "auJEIBgnfcYIC8PN5iOCDQAAABo"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇺🇸
TPI-Abuse
2026-10-15 13:59:27
UTC ·
(3 weeks ago)
(mod_security) mod_security (id:210350) triggered by 31.134.7.66 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Thu Oct 15 09:59:21.864516 2026] [security2:error] [pid 8311:tid 8311] [client 31.134.7.66:54563] ModSecu ...
show more
(mod_security) mod_security (id:210350) triggered by 31.134.7.66 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Thu Oct 15 09:59:21.864516 2026] [security2:error] [pid 8311:tid 8311] [client 31.134.7.66:54563] ModSecurity: Access denied with code 403 (phase 2). Pattern match "\\\\b(close|keep-alive),[\\\\t\\\\n\\\\r ]{0,1}(close|keep-alive)\\\\b" at REQUEST_HEADERS:Connection. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/12_HTTP_Protocol.conf"] [line "70"] [id "210350"] [rev "1"] [msg "COMODO WAF: Multiple/Conflicting Connection Header Data Found||www.mwrn.com|F|4"] [data "keep-alive, close"] [severity "WARNING"] [tag "CWAF"] [tag "Protocol"] [hostname "www.mwrn.com"] [uri "/EBSD/resources.cshtml"] [unique_id "atDcOWvLhD4iSRpoFz5WfgAAAAM"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇬🇧
relianoid.com
2026-09-12 22:34:38
UTC ·
(1 month ago)
POST Abuse detected by Relianoid OSS Load Balancer - relianoid.com
Web Spam
🇨🇿
Countryman
2026-09-11 00:10:02
UTC ·
(1 month ago)
repeated unauthorized VPN login attempt, user sweep
VPN IP
Hacking
Brute-Force
🇺🇸
TPI-Abuse
2026-01-10 20:00:59
UTC ·
(9 months ago)
(mod_security) mod_security (id:210492) triggered by 31.134.7.66 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sat Jan 10 15:00:33.596121 2026] [security2:error] [pid 26109:tid 26109] [client 31.134.7.66:48101] ModSe ...
show more
(mod_security) mod_security (id:210492) triggered by 31.134.7.66 (-): 1 in the last 300 secs; Ports: *; Direction: 1; Trigger: LF_MODSEC; Logs: [Sat Jan 10 15:00:33.596121 2026] [security2:error] [pid 26109:tid 26109] [client 31.134.7.66:48101] ModSecurity: Access denied with code 403 (phase 1). Matched phrase "wp-config.php" at REQUEST_URI. [file "/etc/apache2/conf.d/modsec_vendor_configs/comodo_apache/02_Global_Generic.conf"] [line "120"] [id "210492"] [rev "3"] [severity "CRITICAL"] [tag "CWAF"] [tag "Generic"] [hostname "engravingbyangela.com"] [uri "/wp-config.php~"] [unique_id "aWKv4exDpB54YlRFVMiYewAAABQ"]
show less
Brute-Force
Bad Web Bot
Web App Attack
🇹🇷
pamircil
2025-12-31 13:11:11
UTC ·
(10 months ago)
🍯 WinnieThePooh Honeypot : GET request to '/wp-config.orig' on (http/80)💀
Hacking
Brute-Force
SSH
🇨🇭
backslash
2025-11-23 06:53:34
UTC ·
(11 months ago)
Bad Web Bot
2025-06-25 12:03:00
UTC ·
(1 year ago)
Message meets Alert condition
The following critical firewall event was detected: SSL VPN login fail.
date=2025-06-24 time=16:08:20 devname=FortiGate-200F devid=FG200FT922906136 eventtime=1750799300887290996 tz="-0500" logid="0101039426" type="even ...
show more
Message meets Alert condition
The following critical firewall event was detected: SSL VPN login fail.
date=2025-06-24 time=16:08:20 devname=FortiGate-200F devid=FG200FT922906136 eventtime=1750799300887290996 tz="-0500" logid="0101039426" type="event" subtype="vpn" level="alert" vd="root" logdesc="SSL VPN login fail" action="ssl-login-fail" tunneltype="ssl-web" tunnelid=0 remip=31.134.7.66 srccountry="United States" user="besadmin" group="N/A" dst_host="N/A" reason="sslvpn_login_unknown_user" msg="SSL user failed to logged in"
show less
VPN IP
